Don't know if I should post it to hackers list, by I'll try here first.
For many reasons, we're currently deploying a mirror for postgresql rpm packages. And when we run reposync (yum mirroring tool) with --gpgcheck switch some packages are removed due to failed signature check.